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(54) SYSTEM FOR LINKING PLURAL WWW SERVERS 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide a system which 

accesses plural pages and plural different WWW servers 

based on a unique invisible session ID that is assigned 

within authentication valid time once a user authenticates a 

system that links plural WWW servers. 

SOLUTION: A host 31 analyzes an HTML document from a 

browser 22 which is notified from any of plural WWW servers « 

1 1 , sends an input request for user information to the 

browser 22 through the WWW server 1 1 when a session ID J t 

is not added, analyzes the sent user information to generate „ v „. 

a unique session ID to a request that is allowed to be 

registered, sends an HTML document in which the session 

ID is embedded again to the browser 22 through the WWW 

server 1 1 and also manages valid time information to allow 

authentication within the range of the valid time information. 



* NOTICES * 

JP0 and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 
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[Claim(s)] 

[Claim 1]A host is notified of an HTML document received from a browser, And in a network system 
provided with two or more WWW servers which transmit to a browser an HTML document which 
embedded session ID which embedded session ID which received a notice from a host at an HTML 
document, and received a notice in a browser from transmission or a host, The above-mentioned 
host analyzes an HTML document from a browser notified from above-mentioned one of two or 
more WWW servers, When session ID is not added, an input request of User Information is 
transmitted to a browser via the above-mentioned WWW server, Transmit an HTML document which 
generated session ID of a meaning to a demand to which analyzed transmitted User Information and 
registration was permitted, and session ID embedded via a WWW server again to a browser, and. Two 
or more WWW server cooperation system managing earned-hours information and allowing 
attestation at the time of within the limits of earned-hours information. 

[Claim 2]The two or more WWW server cooperation system according to claim 1 having embedded 
session ID at HTML document Kami so that it might not display on URL, and making session ID into 
invisibility when embedding above-mentioned session ID at an HTML document. 
[Claim 3]Claim 1 or the two or more WWW server cooperation system according to claim 2 
characterized by comprising the following. 

A call function which calls a cooperation demon into a demon who transmits and receives an HTML 
document by Hazama with a browser to the above-mentioned WWW server. 

A host is notified of an HTML document received from a browser when called from this call function, 
And a cooperation demon who transmits to a browser an HTML document which embedded session 
ID which embedded session ID which received a notice from a host at an HTML document, and 
received a notice in a browser from transmission or a host. 

[Claim 4]The two or more WWW server cooperation system according to claim 3 equipping the 
above-mentioned WWW server with a ****** library which performs processing which received a 
request from the above-mentioned cooperation demon. 

[Claim 5]Claim 1 having matched with above-mentioned User Information and setting up attestation 
earned hours as the above-mentioned earned-hours information thru/or one of the two or more 
WWW server cooperation systems according to claim 4. 

[Claim 6]Existence of attestation is set up for every directory which compiled every HTML 
document or two or more HTML documents on the above-mentioned WWW server, Claim 3, wherein 
the above-mentioned call function calls the above-mentioned cooperation demon only at the time of 
****** thru/or one of the two or more WWW server cooperation systems according to claim 5. 
[Claim 7]A host is notified of an HTML document received from a browser, And a recording medium 
which stored a program which operates on a WWW server which transmits to a browser an HTML 
document which embedded session ID which embedded session ID which received a notice from a 
host at an HTML document, and received a notice in a browser from transmission or a host. 
[Claim 8]An HTML document from a browser notified from one of two or more WWW servers is 
analyzed, When session ID is not added, an input request of User Information is transmitted to a 
browser via a WWW server, Transmit an HTML document which generated session ID of a meaning 
to a demand to which analyzed transmitted User Information and registration was permitted, and 
session ID embedded via a WWW server again to a browser, and. A recording medium which stored a 
program which operates on a host who manages earned-hours information and allows attestation at 
the time of within the limits of earned-hours information. 



[Translation done.] 
* NOTICES * 
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JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention]This invention relates to two or more WWW server cooperation system with 

which two or more WWW servers cooperate. 

[0002] 

[Description of the Prior Art]Conventionally, the session of HTTP (Hyper Text Transfer Protocol) 

which is a communications protocol of a WWW server is set up when a browser requires a page, and 

if a server transmits the page, it will be cut. Thus, a session completely turns into another session, 

when it goes out for every page and the next page (screen) is accessed. 

[0003]Therefore, to a page to be attested [ of a user ], it is made to attest a user per page. 

[0004] 

[Problem to be solved by the invention]User authentication is required whenever the conventional 
attestation accesses the page of a WWW server from a browser, as mentioned above, The browser 
inputted information (information on user ID, a password, etc.) required for the attestation, and 
transmitted, and there was a problem of generating for every required page [ **** / troublesome 
operation in which a server attests ]. 

[0005]When other WWW servers of the same function were accessed from a browser, for every 
Paige naturally to be attested, information required for the attestation was inputted, it transmitted, 
and there was also a problem that a server had to attest. 

[0006]In order that this invention may solve these problems, once a user attests, it aims at realizing 
the system which accesses possible over two or more pages or several different WWW servers 
based on invisible session ID of the given meaning within attestation earned hours. 
[0007] 

[Means for solving problem]With reference to o o \ - ^ The means for solving a technical problem 
is explained. In dijuv^ >, WWW server 1 1 notifies the host 31 of the HTML document received from 
the browser 22, or. transmitting the HTML document which embedded session ID which embedded 
session ID which received the notice from the host 31 at the HTML document, and received the 
notice in the browser 22 from transmission or the host 31 to the browser 22 **** — etc. — it 
carrying out and, It comprises the demon 12, the cooperation demon 14, the part library 15, etc. 
[0008]The demon 1 2 transmits and receives data via a network by Hazama with the browser 22, and 
has the call function 13 etc. here. The call function 13 calls the cooperation demon 14, when an 
HTML document is received from the browser 22. 

[0009]the cooperation demon 14 being called from the call function 13, and notifying the host 21 of 
the HTML document which the demon 12 received, notifying the demon 12 of the HTML document 
notified by the host 31, or calling the part live rye 14, and requesting prescribed processing **** — 
etc. — it carries out. 

[0010]The part libraries 15 are parts (program) which perform various processing which received the 
request from the cooperation demon 14. transmitting an HTML document applicable when the 
browser 22 displays on a screen the HTML document which was connected with WWW server 1 1 via 
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the network, and was received from WWW server 1 1 concerned or a document/image is chosen on a 
screen etc. to the WW server 1 1 **** — etc. — it carries out. 

[001 1]the host 31 performing various processing based on the HTML document notified by the 
cooperation demon 1 4 who constitutes WWW server 1 1 , or transmitting data to the browser 22 by 
cooperation demon 1 4 course **** — etc. — it carries out. 

[0012]Next, operation is explained. WWW server 11 notifies the host 31 of the HTML document 
received from the browser 22, The HTML document from the browser 22 to which the host 31 was 
notified is analyzed, When session ID is not added, the input request of User Information is 
transmitted to the browser 22 via WWW server 1 1, Transmit the HTML document which generated 
session ID of a meaning to the demand to which analyzed transmitted User Information and 
registration was permitted, and session ID embedded via WWW server 1 1 again to the browser 22, 
and. He manages earned-hours information and is trying to allow attestation at the time of within 
the limits of earned-hours information. 

[0013]Under the present circumstances, when embedding session ID at an HTML document, session 
ID is embedded at an HTML document so that it may not display on URL, and it is made to make 
session ID into invisibility. 

[0014]The call function 13 which calls the cooperation demon 14 is established into the demon 12 
who transmits and receives an HTML document etc. by Hazama with the browser 22 to WWW server 
11, The host 31 is notified of the HTML document which the cooperation demon 14 called from the 
call function 13 received from the browser 22, He is trying to transmit the HTML document which 
embedded session ID which received the notice from the host 31 at the HTML document, and 
embedded session ID which received the notice from transmission or the host 31 via the demon 12 
at MOBURAUZA 22 to the browser 22 via the demon 12. 

[0015]He establishes the ****** library 15 which performs processing which received the request 
from the cooperation demon 14 in WWW server 1 1, and is trying to request various processing from 
it to the part library 15 concerned. 

[0016]As earned-hours information, the host 31 matches with User Information, sets up attestation 
earned hours, and is made to judge the validity of session ID. The existence of attestation is set up 
for every HTML document on WWW server 1 1 , and he calls only at the time of ******, and is trying 
for the function 13 to call the cooperation demon 14. 

[001 7]Therefore, once a user attests, it will become possible within attestation earned hours to 
access over two or more pages or several different WWW servers 1 1 based on invisible session ID of 
the given meaning. 
[0018] 

[Mode for carrying out the invention]Next, an embodiment of the invention and operation are 
explained to details one by one using § ; from o o \ 

[001 9]0\v.- : ^; i shows the system configuration figure of this invention. In vi ^ WWW server 
1 1 notifies the host 31 of the HTML document received via the network from the browser 22, or. 
transmitting the HTML document which embedded session ID which embedded session ID which 
received the notice from the host 31 at the HTML document, and received the notice in the browser 
22 from transmission or the host 31 via the network to the browser 22 via a network **** — etc. - 
- it carrying out and, It comprises the demon 12, the cooperation demon 14, the part library 15, etc. 
This WWW server 1 1 performs processing indicated to be a WWW server in ^§ ? mentioned 
later, for example. Here, an HTML document is a document it was described with HTML language 
that displayed a document and an image, and there are URL (address) and header information 
(information used with an HTTP protocol) on the screen of a browser elsewhere. 
[0020]Delivering [ the demon (http) 12 ] and receiving data (URL, a htmIL document, etc.) by 
Hazama with the browser 22 via a network using an HTTP protocol, he has the call function 13 etc. 
here. 

[0021 ]The call function 13 calls the cooperation demon 14, when an HTML document is received 
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from the browser 22. Notify the host 21 of the HTML document which the cooperation demon 14 
was called from the call function 13, and the demon 12 received, or, notifying the demon 12 of the 
HTML document notified by the host 31, or calling the part live rye 14, and requesting prescribed 
processing **** — etc. — it carries out and processing indicated to be a cooperation demon in 
/ nv . v mentioned later is performed. 

[0022]The part library 15 performs processing indicated to be parts in , k g . which is the parts 
which perform various processing which received the request from the cooperation demon 14, for 
example, is mentioned later. It connects with WWW server 11 via a network, and the terminal 21 
delivers and receives data using an HTTP protocol, and comprises the browser 22 etc. here. 
[0023]The browser 22 displays on a screen the HTML document which was connected with WWW 
server 1 1 via the network, and was received from WWW server 1 1 concerned, or, transmitting an 
HTML document applicable when a document/image is chosen on a screen etc. to WWW server 1 1 
**** — etc. — it carries out and they are general-purpose browsers (program which displays an 
HTML document), such as a net escape (product name). 

[0024]The host 31 performs various processing based on the HTML document notified by the 
cooperation demon 1 4 who constitutes WWW server 11, or, transmitting data to the browser 22 by 
cooperation demon 14 course **** — etc. — it carries out, and it comprises the management tool 
32, the management table 33, etc., and various processing indicated to be a host of ' , 
mentioned later is performed here. 

[0025]turning data to the browser 22 at the time of the attestation [ **** / that the management 
tool 31 attests with reference to the management table 32 ] O.K., and transmitting **** — etc. — it 
carries out. The management table 32 is a table which registers and manages various management 
information, and comprises the security table 34, the session table 35, etc. here. 
[0026]The security table 34 manages the security information of an HTML document, and manages 
information as shown in o?.^-;^ 0 mentioned later. The session table 35 manages the attestation 
earned hours of session ID, and manages here information as shown in o . ^ ^ - mentioned later, 
for example. 

[0027]Next, according to the turn shown in \- ^ , operation of the composition of o „ \ is 
explained in detail. 0 x N shows the explanatory view of this invention of operation. Here, a 
browser, a WWW server, and a host are equivalent to the browser 22 of o ^ ^ , WWW server 1 1 , 
and the host 31, respectively. 

[0028]In 0 o ^ S1 specifies URL to refer to. This transmits the URL concerned to WWW server 
1 1 corresponding to specification of URL (address) which the browser 22 refers to. 
[0029]S2, WWW server 1 1 receives URL (it receives). S3 analyzes URL. S4 is distinguished in a 
plug-in function designator as a result of the analysis of URL of S3. In YES, processing of the 
following concerning this invention is performed, and it calls to it by S7, and the function 13 calls the 
cooperation demon 14, performs delivery to a permanent residence demon (cooperation demon) by 
S8, notifies the host 31 of an authentication demand by S9, and progresses to S10. On the other 
hand, since it became clear that there is no call of a plug-in function in NO of S4, a html document 
is sent out by S5 and the browser 22 displays a html document on a screen by S8. 
[0030] By the above S1 thru/or S9, URL which the browser 22 refers to is transmitted to WWW 
server 1 1 , The demon (http) 1 2 of WWW server 1 1 receives URL, and it is distinguished whether a 
plug-in function call is required, In YES, the cooperation demon 14 is called (when required), and it 
becomes possible to notify the host 31 of an authentication demand, On the other hand, it enables 
the browser 22 to transmit the html document corresponding to URL as usual at the browser 22 in 
NO (when not required), and to display a html document on a screen. 

[0031 ]S10, the host 31 receives the authentication demand from the cooperation demon 14. S1 1 
analyzes URL. S1 2 judges that it is URL to be attested. This is judged with reference to the security 
table 34 of o ^ ^ for which it is mentioned later whether the html document specified by URL is 
what needs attestation. When attestation is required, it progresses to S15. On the other hand, when 
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attestation is unnecessary, the html document which transmitted the html document to the browser 
22 via WWW server 1 1 by S13, and the browser 22 received by S14 is displayed on a screen. 
[0032]Since S15 turned out for attestation to be required by S12, it takes out the attestation range 
of specified URL. S16 distinguishes whether session ID is added. This distinguishes whether session 
ID is added to the attestation range of URL received from the browser 22 by S15 (it is distinguished 
whether session ID is already added before). Since it became clear that session ID was already set 
by S17 thru/or 37 before in YES, it progresses to S41. On the other hand, in NO, since it became 
clear that session ID is not set (addition), session ID is added by S17 thru/or S32. 
[0033]Since S17 turned out not to add session ID by S16, it notifies the transmission request of ID 
and a password screen (java) to WWW server 1 1 . The cooperation demon 1 4 of WWW server 1 1 
receives S1 8. 

[0034]The parts in the part library 15 send out ID and html for password input (java, html) from the 
cooperation demon 14 who received S19 by S18. S20 displays html (java) for password input sent 
out by S19 on the browser 22. 

[0035]the screen top for password input where S21 was displayed by S20 — ID — password input 
is carried out. For example, a user enters user ID and a password by the password / ID input screen 
Kami of ^ n\ * £ ^ mentioned later, and the depression of the START button is carried out. 
[0036]S22 enciphers ID and a password (java) and transmits to WWW server 1 1. S23 sends out 
receiving information (re-encryption). This receives ID to which 1 1 was transmitted with WWW 
serverS22, and the information which the password enciphered, re-enciphers this information, and 
transmits to the host 1 1 . 

[0037]By the hostS23, S24 receives the information to which 31 was transmitted, and ** and 
decrypts it. S25 takes out ID and the password which were decrypted by S24. S26 performs search 
of ID and a password. This searches ID (user ID, password) in the session table 35 of 1* n- sfig 
mentioned later, for example, and distinguishes whether there is any match. In O.K., it progresses 
S29. Since it was proved that they are ID in agreement and the ** error into which the password is 
not registered in the case of NG, error display html which pointed to WWW server 1 1, and 
transmitted html for error displays by S27, and the browser 22 received by S28 performs an error 
display on a screen. 

[0038]Since it became clear that S29 searches ID and a password with S26, and has a match, the 
attestation range is judged. This judges the attestation range for every user ID besides a graphic 
display, and distinguishes whether attestation authority is given by the user ID concerned. In O.K., it 
progresses S30. Since it became clear that attestation authority is not given to user ID in the case 
of NG, html for error displays is sent out by S27, and the browser 22 displays error display html on a 
screen by S28. 

[0039]Since attestation authority was proved by O.K. of S29 that it is ****, S30 sets session ID. 
Session ID of a meaning which consists of a date time second ms of current time is set to the 
column to which session ID in the session table 35 of N \ ^ ^ • corresponds, and session ID 
memorizes it, as it is ID of a meaning, for example, is shown in o ,^ \ \^ ■.- mentioned later. 
[0040]S31 sets attestation guarantee time. This takes out the attestation earned hours of the 
session table 35 of / Uv % g ^ mentioned later, adds them to current time, and is set to the column 
of the attestation expiration time of v :\ • concerned in quest of attestation expiration time. 
[0041 ]S32 sends out session ID. S33 receives session ID to which 14 was sent out by the 
cooperation demonS32 of WWW server 1 1 . 

[0042]S34 adds session ID to URL as which parts were specified. This adds session ID to URL as 
which (a) of n\ £ ; mentioned later, for example was specified, and generates URL of (b) of 
s \ x 0 (session ID addition). 

[0043]S35 carries out the reorganization collection of the addition URL to fixed URL. This as fixed 
URL about URL of (b) of o o \ \^ ; which added session ID by S34 (session ID addition), It adds like 
a graphic display of data, generation, i.e., immobilization by a system, of URL of (c) of •„1kv\"^, $ (cgi 
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addition), Even if original right session ID is embedded into a html document and URL (cgi addition) 
is displayed explicitly, as SENSHON ID is not displayed, it is made not visible to others (invisibility is 
used). 

[0044]S36 sends out a html document. The browser 22 displays on a screen the html document in 
which S37 was sent out by S36. Under the present circumstances, although URL (cgi) is displayed, 
right session ID considers [ that fixed cgi (for example, xxxx.cgi) is only displayed on the URL 
concerned by a system, and ] it as invisibility, and he is trying to embed into a html document. And 
it returns and repeats to S1. 

[0045]Since S41 turned out to add session ID by S16, it searches session ID. This distinguishes 
whether it registers with the session table 35 of ^ • about session ID. In O.K., it progresses 
S42. Since it became clear that session ID is not registered into the session table 35 in the case of 
NG, processing after S17 mentioned already is performed, and re-registration of session ID is 
performed. 

[0046]S42 is distinguished in the inside of the useful range of session ID. This has current time 
within the attestation expiration time in the entry of session ID applicable with reference to the 
session table 35 of dr>v>n^ 4 mentioned later, and distinguishes whether the session ID concerned 
is effective. In O.K., processing after S33 mentioned already is performed. Although session ID was 
registered into the session table 35 in the case of NG, since it became clear that it is not earned- 
hours within the limits, processing after S17 mentioned already is performed, and re-registration of 
session ID is performed. 

[0047]By the above, conduct URL analysis, and in being URL to be attested, When session ID is not 
added, transmit to the browser 22 and ID and a password input screen are displayed, ID and the 
password which were entered add session ID of a meaning at the time of the right, On the other 
hand, when session ID is added and the session ID concerned is earned-hours within the limits, add 
session ID into a html document at invisibility, and it transmits to the browser 22, When it transmits 
to the browser 22 and ID and a password input screen are displayed, when it is not earned-hours 
within the limits, even if session ID is added, and ID and the password which were entered re-add 
session ID of a meaning at the time of the right, It enables the browser 22 and the host 31 to 
transmit and receive via arbitrary WWW servers 1 1 about earned-hours within the limits based on 
session ID embedded into the html document at invisibility. It explains to details one by one below. 
[0048] v -As v § 0 shows the example of a security table of this invention. This matches and registers 
SOP, TYPE, and URL. Here, SOP expresses -001 :SABIBISU classification like a graphic display, 
expresses 'PUB:public presentation, and expresses -BAS:foundations. 
[0049]TYPE expresses -00:attestation (charge) like a graphic display. 
**01: Express attestation (no charge). 
[0050] 

- BS : express foundations. 

- PUB : express public presentation. 

URL connects a directory and a html document like a graphic display. 

[0051 ]As mentioned above, the security decided by SOP and TYPE for every html document is 
registered, and it is made to manage with the security table 34 1 \. 1 vv ^ shows the example of a 
session table of this invention. Like a graphic display, match this session table 35 with user ID and a 
password, and Attestation earned hours, Patrol time and timer-supervision time are registered 
beforehand, When the host 31 actually receives URL to be attested first from the browser 22. It is 
alike and session ID (session ID of a meaning decided by the date time second ms of current time 
like a graphic display) of a meaning is added. It sets to the column of session ID of the session table 
35 concerned, and the attestation expiration time which added and found attestation earned hours 
at registration and current time is set to the column of the attestation expiration time of the 
session table 35 concerned. And embed session ID in a html document at invisibility, and deliver and 
receive via arbitrary WWW servers 1 1 by Hazama of the host 31 and the browser 22, that treat 
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session ID as an effective thing until attestation expiration time passes, and the host 31 transmits 
data to the browser 22 **** — etc. — it is made to carry out. 

[0052]It is a time interval which patrols whether the patrol time in the session table 35 passes the 
attestation expiration time in the entry in the session table 35 concerned, and has an unnecessary 
thing, and is for an invalid thing's deleting and reducing memory space. Timer-supervision time sets 
up time to supervise various timers. 

[0053]ID in the session table 35 and a password are the copies of user ID and a password registered 
into the master DB which registered user ID and a password off-line besides a graphic display. 
[0054] s o v _ shows ID / example of a password input screen of this invention. This is an 
example of an input screen of ID/password displayed on the screen of the browser 22 by S20 of 

- \ „ N mentioned already, and displays the field which enters user ID and a password like a 
graphic display. If it inputs into the input area of these user ID and a password and the depression 
of the START button is carried out, it enciphers by S22 of ^\ * ^ . N mentioned already, and sends 
out to WWW server 1 1 . 

[0055]^ 4 ^ ^ shows ID / pass-word-authentication flow chart of this invention. In o o 0 S51 
distinguishes whether ID/password is registered to the master DB. In YES, it distinguishes from the 
attestation O.K. by S52. Since it became clear that it is not that ID and the password of which the 
host 31 was notified via WWW server 1 1 inputted by ID / password input screen Kami of ■, s , v 
are registered into the master DB in NO, it is decided by S53 that it will be attestation NG. 
[0056]. v :w 1 ^ ' shows the judgment flow chart of the attestation range of this invention. This is a 
flow chart which judges the attestation range based on TYPE registered into the security table 34 of 
o , N \ ^ mentioned already. 

[0057]In , ^; , S61 distinguishes either of the values (00, 01 , BS, PUB) of the column of TYPE 
of the security table 34 of o o-.\ -\ ^ specified by URL. S62 judges attestation O.K. / attestation NG 
with the value (00, 01, BS, PUB) of the column of TYPE, respectively. 

[0058]- In the case of TYPE=00, it distinguishes in pay service ****** by S63, is judged with the 
attestation O.K. by S64 at the time of YES, and is judged with attestation NG by S65 at the time of 
NO. 

[0059]- In the case of TYPE=01, it distinguishes in free service ****** by S66, is judged with the 
attestation O.K. by S67 at the time of YES, and is judged with attestation NG by S68 at the time of 
NO. 

[0060]- In TYPE=BS, it is judged with the attestation O.K. by S69. 
- In TYPE=PUB, it is judged with the attestation O.K. by S70. 

- sv, 1 £ shows the URL/html document examples of this invention. 

[0061](a) of o o<\ \_ ^ shows the example of URL. Here, as for URL, a http://www.fujitsu.co.jphtml 
document embeds -HREF:URL data of a graphic display into the html document concerned. 
[0062](b) of dr>\!>^ o shows the example of URL (session ID addition). Here, URL (session ID 
addition) a http://www.fujitsu.co.jp?END=yymmddhhmmssxxxhtml document, It is what (what was 
embedded at invisibility) embedded -HREF:URL (session ID) data of the graphic display into the html 
document concerned. Since it will be displayed explicitly that this URL (session ID addition) is sent 
out to the browser 22 as it is and session ID can be seen, the way things stand, it does not send out 
to the browser 22. 

[0063](c) of o o>\ - ^ ^ shows the example of URL (cgi addition). Here, URL (cgi addition) is that 
(what was embedded at invisibility) to which the http://www.fujitsu.co.jp/xxxx.cgihtml document 
embedded -HREF:URL (session ID) data of the graphic display into the html document concerned. 
Even if it sends out this URL (cgi addition) to the browser 22, session ID "yymmddhhmmssxxx" is 
not displayed [ that "... xxxx.cgi" is only displayed explicitly and ] explicitly, and it becomes possible 
to hold secretly. 
[0064] 

[Effect of the Invention]As explained above, according to this invention, the HTML document from 
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the browser notified from one of two or more WWW servers is analyzed, When session ID is not 
added, the input request of User Information is transmitted to a browser via a WWW server, 
Transmit the HTML document which generated session ID of a meaning to the demand to which 
analyzed transmitted User Information and registration was permitted, and session ID embedded via 
the WWW server again to a browser, and. Earned-hours information is managed, and since the 
composition which allows attestation at the time of within the limits of earned-hours information is 
adopted, once a user attests, it can access over two or more pages or several different WWW 
servers based on invisible session ID of the given meaning within attestation earned hours. Thus, it 
became possible to realize session management over two or more WWW servers by invisible session 
ID. 



[Translation done.] 
* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

,,v " N \ : It is a system configuration figure of this invention. 
N , - It is an explanatory view of this invention of operation. 
N , - ^ It is an example of a security table of this invention. 
N , - - It is an example of a session table of this invention. 
N , - - They are ID / example of a password input screen of this invention. 
, N o x ^ " They are ID / pass-word-authentication flow chart of this invention. 
, N o x ^ ' It is a judgment flow chart of the attestation range of this invention. 
, N o x ^ ^ They are URL/html document examples of this invention. 
[Explanations of letters or numerals] 
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[Translation done.] 
* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 
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